Palo Alto Networks Enterprise Firewall PA-440
The World's first ML-Powered Next Generation Firewall
Click here to jump to more pricing!
Please Note: All Prices are Inclusive of GST
Overview:
The Palo Alto Networks PA-400 Series, comprising the PA-460, PA-440, PA-440, and PA-410, brings ML-Powered NGFW capabilities to distributed enterprise branch offices, retail locations, and midsize businesses.
The world's first ML-Powered Next-Generation Firewall (NGFW) enables you to prevent unknown threats, see and secure everything-including the Internet of Things (IoT)-and reduce errors with automatic policy recommendations.
The controlling element of the PA-400 Series is PAN-OS®, the same software that runs all Palo Alto Networks NGFWs. PAN-OS natively classifies all traffic, inclusive of applica- tions, threats, and content, and then ties that traffic to the user regardless of location or device type. The application, content, and user-in other words, the elements that run your business-then serve as the basis of your security pol- icies, resulting in improved security posture and reduced incident response times.
Key Security and Connectivity Features:
ML-Powered Next-Generation Firewall
- Embeds machine learning (ML) in the core of the firewall to provide inline signatureless attack prevention for file- based attacks while identifying and immediately stopping never-before-seen phishing attempts.
- Leverages cloud-based ML processes to push zero-delay signatures and instructions back to the NGFW.
- Uses behavioral analysis to detect IoT devices and make policy recommendations as part of a cloud-delivered and natively integrated service on the NGFW.
- Automates policy recommendations that save time and reduce the chance of human error.
Identifies and categorizes all applications, on all ports, all the time, with full Layer 7 inspection
- Identifies the applications traversing your network irrespective of port, protocol, evasive techniques, or encryption (TLS/SSL).
- Uses the application, not the port, as the basis for all your safe enablement policy decisions: allow, deny, schedule, inspect, and apply traffic-shaping.
- Offers the ability to create custom App-ID™ tags for pro- prietary applications or request App-ID development for new applications from Palo Alto Networks.
- Identifies all payload data within an application (e.g., files and data patterns) to block malicious files and thwart exfil- tration attempts.
- Creates standard and customized application usage reports, including software-as-a-service (SaaS) reports that provide insight into all sanctioned and unsanctioned SaaS traffic on your network.
- Enables safe migration of legacy Layer 4 rule sets to App-ID-based rules with built-in Policy Optimizer, giving you a rule set that is more secure and easier to manage.
Enables SD-WAN functionality
- Allows you to easily adopt SD-WAN by simply enabling it on your existing firewalls.
- Enables you to safely implement SD-WAN, which is natively integrated with our industry-leading security.
- Delivers an exceptional end user experience by minimizing latency, jitter, and packet loss.
Prevents malicious activity concealed in encrypted traffic
- Inspects and applies policy to TLS/SSL-encrypted traffic, both inbound and outbound, including for traffic that uses TLS 1.3 and HTTP/2.
- Offers rich visibility into TLS traffic, such as amount of encrypted traffic, TLS/SSL versions, cipher suites, and more, without decrypting.
- Enables control over use of legacy TLS protocols, insecure ciphers, and misconfigured certificates to mitigate risks.
- Facilitates easy deployment of decryption and lets you use built-in logs to troubleshoot issues, such as applications with pinned certificates.
- Lets you enable or disable decryption flexibly based on URL category, source and destination zone, address, user, user group, device, and port, for privacy and compliance purposes.
- Allows you to create a copy of decrypted traffic from the firewall (i.e., decryption mirroring) and send it to traffic collection tools for forensics, historical purposes, or data loss prevention (DLP).
Delivers a unique approach to packet processing with Single-Pass Architecture
- Performs networking, policy lookup, application and de- coding, and signature matching-for all threats and con- tent-in a single pass. This significantly reduces the amount of processing overhead required to perform multi- ple functions in one security device.
- Avoids introducing latency by scanning traffic for all signa- tures in a single pass, using stream-based, uniform signa- ture matching.
- Enables consistent and predictable performance when security subscriptions are enabled. (In Table 1, "Threat Prevention throughput" is measured with multiple sub- scriptions enabled.)
Enforces security for users at any location, on any device, while adapting policy based on user activity
- Enables visibility, security policies, reporting, and forensics based on users and groups-not just IP addresses.
- Easily integrates with a wide range of repositories to lever- age user information: wireless LAN controllers, VPNs, directory servers, SIEMs, proxies, and more.
- Allows you to define Dynamic User Groups (DUGs) on the firewall to take time-bound security actions without wait- ing for changes to be applied to user directories.
- Applies consistent policies irrespective of users' locations (office, home, travel, etc.) and devices (iOS and Android® mobile devices, macOS®, Windows®, Linux desktops, lap- tops; Citrix and Microsoft VDI and Terminal Servers).
- Prevents corporate credentials from leaking to third-party websites and prevents reuse of stolen credentials by enabling multi-factor authentication (MFA) at the network layer for any application without any application changes.
- Provides dynamic security actions based on user behavior to restrict suspicious or malicious users.
Technical Specifications:
| Table 1: PA-400 Series Performance and Capacities | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| Model | PA-410 | PA-415 | PA-415-5G | PA-440 | PA-445 | PA-450 | PA-455 | PA-460 | PA-465 |
| Firewall throughput (appmix) | 1.4 Gbps | 1.5 Gbps | 1.5 Gbps | 2.6 Gbps | 2.7 Gbps | 3.3 Gbps | 3.6 Gbps | 3.2 Gbps | 4.6 Gbps |
| Threat Prevention throughput (appmix) | 0.8 Gbps | 0.8 Gbps | 0.8 Gbps | 1.2 Gbps | 1.25 Gbps | 2.1 Gbps | 2.3 Gbps | 1.8 Gbps | 3 Gbps |
| IPsec VPN throughput | 0.65 Gbps | 0.65 Gbps | 0.65 Gbps | 1.1 Gbps | 1.1 Gbps | 1.7 Gbps | 1.8 Gbps | 650 Mbps | 2.3 Gbps |
| Max concurrent sessions | 64,000 | 64,000 | 64,000 | 200,000 | 200,000 | 300,000 | 300,000 | 300,000 | 400,000 |
| New sessions per second | 11,000 | 11,000 | 11,400 | 34,000 | 34,000 | 48,000 | 56,000 | 48,000 | 67,000 |
| Virtual systems (base/max) | 1/1 | 1/1 | 1/1 | 1/2 | 1/2 | 1/5 | 1/5 | 1/5 | 1/5 |
Documentation:
Download the Palo Alto Networks Firewall Overview Datasheet (PDF).
Download the Palo Alto Networks PA-400 Series Specification Datasheet (PDF).
Pricing Notes:
- All Prices are Inclusive of GST
- Pricing subject to change without notice.
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SaaS Inline requires CDL
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
SD-WAN requires PAN-OS 9.1 or higher and Panorama
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Devices must be deployed in HA pair to qualify for HA pricing on subscriptions - order quantity 1 per device in an HA pair
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
Our Price: Request a Quote
